Apache Tomcat SSL Anonymous Cipher 配置信息泄露漏洞

<a href="https://www.securityfocus.com/bid/28482" target="_blank">https://www.securityfocus.com/bid/28482</a><br/> <a href="http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200705-149" target="_blank">http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200705-149</a><br/>

Apache Tomcat 中的默认的SSL密码配置使用特定的不安全的密码,包括匿名密码，这使得远程攻击者可以获得敏感信息或造成其他未明影响。

来源:VUPEN
名称:ADV-2007-1729
链接:http://www.frsirt.com/english/advisories/2007/1729
来源:tomcat.apache.org
链接:http://tomcat.apache.org/security-5.html
来源:tomcat.apache.org
链接:http://tomcat.apache.org/security-4.html
来源:XF
名称:tomcat-ssl-security-bypass(34212)
链接:http://xforce.iss.net/xforce/xfdb/34212
来源:BUGTRAQ
名称:20090127CA20090123-01:CohesionTomcatMultipleVulnerabilities(Updated-v1.1)
链接:http://www.securityfocus.com/archive/1/archive/1/500412/100/0/threaded
来源:BUGTRAQ
名称:20090124CA20090123-01:CohesionTomcatMultipleVulnerabilities
链接:http://www.securityfocus.com/archive/1/archive/1/500396/100/0/threaded
来源:VUPEN
名称:ADV-2009-0233
链接:http://www.frsirt.com/english/advisories/2009/0233
来源:support.ca.com
链接:http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=197540
来源:SECUNIA
名称:33668
链接:http://secunia.com/advisories/33668
来源:OSVDB
名称:34882
链接:http://osvdb.org/34882
来源:community.ca.com
链接:http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/23.aspx
来源:BID
名称:28482